Red Hat Security Advisory

RHSA-2018:0303

erlang security and bug fix update

Released 2018-02-13 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 11.0 erlang-18.3.4.7-1.el7ost, erlang-asn1-18.3.4.7-1.el7ost, erlang-compiler-18.3.4.7-1.el7ost +37

TI-2017-14604 CVE-2017-1000385 · GHSA-957c-5x9m-m7rv

MEDIUM 46

The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS #1 1.5 padding.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.22098 Published 2017-12-12 Partial fix CWE-203